This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
File: olvfdj8LpjxJo3ar-W5VUIeehbo.mft (raw, json)
Hash identifier: yK3Zd+KgllbLH91oYe5vWtRVRTSx+bahdmm3hCtqUVA=
Subject key identifier: C0:45:25:1A:C0:13:60:97:2B:46:F8:CD:8A:10:B3:D6:52:F9:86:0C
Authority key identifier: A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
Certificate issuer: /CN=A912C738/serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Certificate serial: 0621
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
Manifest number: 0621
Signing time: Sat 24 Jan 2026 22:03:34 +0000
Manifest this update: Sat 24 Jan 2026 22:03:33 +0000
Manifest next update: Sat 31 Jan 2026 22:03:33 +0000
Files and hashes: 1: olvfdj8LpjxJo3ar-W5VUIeehbo.crl (hash: azr0HD6GLbGvDllH8H2YdGuvPjEgkO9n2urDJpWdVuc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Jan 2026 22:03:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1569 (0x621)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912C738, serialNumber=A25BDF763F0BA63C49A376ABF96E5550879E85BA
Validity
Not Before: Jan 24 22:03:33 2026 GMT
Not After : Jan 31 22:03:33 2026 GMT
Subject: CN=697541b5-ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b3:e4:ad:9a:9c:a0:31:3c:65:2b:1f:c4:15:
04:7f:40:85:82:f3:a6:d5:ef:00:8f:a5:ea:cc:1f:
0a:f0:a4:01:0f:3a:96:5f:fe:2a:57:2e:de:03:31:
09:6f:74:db:47:2a:c5:5d:93:4d:86:ca:48:24:83:
6e:4b:9e:72:a6:1e:99:fa:0c:6c:52:be:eb:d4:5e:
a5:21:a0:35:2b:5b:b1:2c:00:11:a9:24:ee:64:dc:
b3:ec:f0:12:a0:89:c1:26:d9:4a:b1:0c:3e:09:5e:
aa:11:ad:02:33:6e:b8:b8:fa:11:e3:94:44:54:89:
16:af:d3:0b:19:b3:98:a7:af:51:c7:7d:ff:cb:27:
fd:dc:81:d9:de:5c:13:24:1a:49:89:5c:98:58:fb:
42:dc:8d:87:a6:34:67:6b:14:f9:39:fd:9e:6a:56:
20:c7:46:73:4c:1d:2c:3a:f3:f1:bd:50:39:0b:3a:
c4:63:04:9d:60:73:89:61:e5:79:85:6b:4f:9c:46:
80:94:b9:da:3e:49:ec:b9:fe:29:ad:c6:98:0e:58:
7e:9d:0a:c1:c5:5c:9f:8b:3e:0e:4d:6d:ca:e8:6b:
27:4a:c5:a9:4c:64:88:f1:3f:02:df:5f:82:8c:8f:
cd:16:94:1a:b6:6f:d4:f6:c9:e3:4b:c9:ea:19:c5:
b8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:45:25:1A:C0:13:60:97:2B:46:F8:CD:8A:10:B3:D6:52:F9:86:0C
X509v3 Authority Key Identifier:
keyid:A2:5B:DF:76:3F:0B:A6:3C:49:A3:76:AB:F9:6E:55:50:87:9E:85:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/olvfdj8LpjxJo3ar-W5VUIeehbo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/3BF0AE9CC9D111EB8DC5D210C4F9AE02/olvfdj8LpjxJo3ar-W5VUIeehbo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:65:0b:b1:b6:62:01:93:26:ae:af:d1:be:80:e6:ec:e1:
45:12:ec:50:dc:aa:ba:72:21:1a:70:e0:54:88:9c:7d:d9:cd:
f7:a5:3a:ce:a2:61:5a:0b:89:a4:68:ff:36:d5:48:aa:00:20:
9d:70:56:21:e3:41:ca:20:0c:66:31:69:5b:d3:bd:cf:3f:83:
b4:18:e3:ef:68:57:fa:46:3a:7c:ff:9e:67:40:1e:f1:d1:39:
05:f5:eb:c8:ef:9f:e2:b6:f9:d1:64:4a:94:fe:64:19:da:26:
76:30:3f:61:e4:a3:5a:76:ad:1a:8b:9b:83:be:6c:a7:67:13:
ff:b0:05:5b:43:5e:97:22:45:40:6f:2a:2e:cf:ce:73:04:ff:
56:6f:ed:72:53:25:40:28:86:2d:04:e3:09:64:e5:1f:e7:1d:
c4:e7:8f:c1:6d:49:d1:df:ff:79:fa:ff:f0:8e:04:46:12:4a:
4e:ef:4b:80:b6:bd:69:2a:ce:f9:25:dd:26:a8:0f:de:95:49:
74:31:33:12:8c:fc:0b:57:03:87:9e:eb:1f:7f:36:16:da:18:
d7:7b:54:12:d0:31:d2:ac:83:56:ca:b9:ab:50:e2:a7:c1:d9:
99:7b:50:be:7c:9c:3f:16:08:11:8b:03:b9:f4:7e:5c:de:e7:
89:fe:06:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkM3MzgxMTAvBgNVBAUTKEEyNUJERjc2M0YwQkE2M0M0OUEzNzZBQkY5NkU1NTUw
ODc5RTg1QkEwHhcNMjYwMTI0MjIwMzMzWhcNMjYwMTMxMjIwMzMzWjAYMRYwFAYD
VQQDDA02OTc1NDFiNS1hYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA57PkrZqcoDE8ZSsfxBUEf0CFgvOm1e8Aj6XqzB8K8KQBDzqWX/4qVy7eAzEJ
b3TbRyrFXZNNhspIJINuS55yph6Z+gxsUr7r1F6lIaA1K1uxLAARqSTuZNyz7PAS
oInBJtlKsQw+CV6qEa0CM264uPoR45REVIkWr9MLGbOYp69Rx33/yyf93IHZ3lwT
JBpJiVyYWPtC3I2HpjRnaxT5Of2ealYgx0ZzTB0sOvPxvVA5CzrEYwSdYHOJYeV5
hWtPnEaAlLnaPknsuf4prcaYDlh+nQrBxVyfiz4OTW3K6GsnSsWpTGSI8T8C31+C
jI/NFpQatm/U9snjS8nqGcW4TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBFJRrA
E2CXK0b4zYoQs9ZS+YYMMB8GA1UdIwQYMBaAFKJb33Y/C6Y8SaN2q/luVVCHnoW6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zQkYwQUU5Q0M5
RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBqeEpvM2FyLVc1VlVJZWVo
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29sdmZkajhMcGp4Sm8zYXItVzVWVUllZWhiby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzczOC8zQkYwQUU5Q0M5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9vbHZmZGo4THBq
eEpvM2FyLVc1VlVJZWVoYm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNGmULsbZiAZMmrq/RvoDm7OFFEuxQ3Kq6ciEacOBUiJx92c33pTrO
omFaC4mkaP821UiqACCdcFYh40HKIAxmMWlb073PP4O0GOPvaFf6Rjp8/55nQB7x
0TkF9evI75/itvnRZEqU/mQZ2iZ2MD9h5KNadq0ai5uDvmynZxP/sAVbQ16XIkVA
byouz85zBP9Wb+1yUyVAKIYtBOMJZOUf5x3E54/BbUnR3/95+v/wjgRGEkpO70uA
tr1pKs75Jd0mqA/elUl0MTMSjPwLVwOHnusffzYW2hjXe1QS0DHSrINWyrmrUOKn
wdmZe1C+fJw/FggRiwO59H5c3ueJ/gYA
-----END CERTIFICATE-----
Generated at Sun Jan 25 04:27:26 2026 by rpki-client